feat: allow http calls when checking Certificate Revocation List (WPB…

…-6493) - cherrypick (#2707)
wireapp · Feb 14, 2024 · 2ab8863 · 2ab8863
1 parent 275ba25
commit 2ab8863
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
@@ -61,7 +61,11 @@
         android:name="android.hardware.camera"
         android:required="false" />
 
+    <!--  usesCleartextTraffic is true as we need to check Certificate Revocation List in HTTP.
+    The CRL itself is signed by the issuer so there is no security issue.
+    For all other calls, we use HTTPS, and this is enforced by OkHttp using ConnectionSpecs. -->
     <application
+            android:usesCleartextTraffic="true"
             android:name=".WireApplication"
             android:allowBackup="false"
             android:fullBackupContent="false"